A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

Publisher excerpt From CIS Advisories

A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall ASA and FTD provide firewall, VPN, and threat defense capabilities for enterprise environments. An attacker could exploit this vulnerability by sending a specially crafted request when connecting to a vulnerable SSL remote access VPN service that has secondary authentication configured on a tunnel group. Successful exploitation could cause the affected device to reload unexpectedly, resulting in a DoS condition and interruption of remote access services. Cisco has released software updates to address this vulnerability, and Cisco states that no workarounds address this vulnerability, though a temporary mitigation is available.

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.